Google Web Security Tutorials — the classes given to new recruits, including Jarlsberg, a bug-ridden very vulnerable demo app for would-be security gurus to fix. I like the idea of releasing antitheses, bad code that can be just as instructive as good code.